$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf31a503-22e3-31bb-9673-5e2012cffa6c.roa File: bf31a503-22e3-31bb-9673-5e2012cffa6c.roa (raw, json) Hash identifier: 7+0wtGKuNA2bCMXsoNzGidiEctCSRmZ+xtViUA7GVkU= Subject key identifier: 5C:DC:FF:62:A3:9F:F3:2A:F4:E4:65:C1:C6:E9:E3:B0:4B:CE:14:37 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584A698B1C976F0C2667FD35AB80 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf31a503-22e3-31bb-9673-5e2012cffa6c.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 18779 IP address blocks: 172.121.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:1c:97:6f:0c:26:67:fd:35:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=e17d1571-483c-42e8-a8f5-8eacc8cf7eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:49:3c:8d:43:ec:d2:bd:60:40:2a:1f:a3:66: 3e:08:2d:8c:a7:a0:2c:4d:1b:48:a4:7b:a2:8d:9d: 42:43:1d:2c:29:a1:9b:82:f2:35:94:e4:b9:41:6e: 2c:f7:31:5b:55:cd:c8:e4:85:5c:ee:bf:6a:c2:a6: f3:1c:33:62:72:aa:f0:b5:cd:27:a2:c6:ad:d1:40: 3a:12:06:96:82:34:9b:42:f6:53:a3:c8:1f:44:93: 31:5e:c9:ce:d1:69:9e:9a:1e:59:44:77:7a:71:4c: c2:64:16:8a:64:ca:97:aa:cc:36:20:e2:ee:37:eb: 02:f3:28:6f:01:3a:7b:2d:86:14:34:fe:fa:74:d8: a7:7d:31:f6:7e:40:75:65:4a:44:57:85:8b:d1:07: 10:d8:a6:fa:76:bd:c4:6a:04:9e:21:82:67:d8:c0: be:a0:5a:18:1d:25:0f:e4:c2:27:2b:99:63:6a:e2: 4d:18:ff:2f:d9:76:5b:c0:00:6c:d6:2d:48:a6:66: c9:c0:99:3c:b4:d0:07:83:6d:b2:82:fd:68:3f:55: f3:6d:32:4f:95:de:8a:df:3c:fa:9b:36:a7:60:bb: c4:74:33:a9:ee:a5:6e:9a:ed:11:e7:00:d2:0c:84: 3d:d3:ec:09:75:0d:ba:5a:2e:84:bb:ca:36:de:b7: 2b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DC:FF:62:A3:9F:F3:2A:F4:E4:65:C1:C6:E9:E3:B0:4B:CE:14:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bf31a503-22e3-31bb-9673-5e2012cffa6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 172.121.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:6b:f5:54:c1:83:6e:9e:2f:be:16:e6:e6:82:73:9b:63:71: ba:27:1d:89:e5:99:5a:95:b5:77:30:6c:63:a2:c1:fc:7c:74: 6c:17:bb:cc:68:94:ad:3c:90:b8:24:e5:0c:15:9b:92:82:3a: 8b:54:73:65:1c:af:a9:4e:fd:c4:8e:64:26:29:40:3c:d7:81: 50:95:e4:34:af:b6:e4:b2:5a:4e:38:df:b2:4a:18:09:49:b7: f6:26:95:97:39:9a:c6:3e:04:d0:93:e3:35:de:3c:e4:af:84: 77:6b:3e:e9:a6:0f:87:2c:90:b3:58:a9:70:0b:15:6e:1a:52: f6:a8:31:56:88:05:18:de:ca:3a:b0:10:f7:f5:26:72:c7:1d: ac:78:bf:e5:67:c7:84:db:7b:09:98:7f:38:82:d4:00:6c:3e: 2d:5a:6b:b5:57:ca:54:9f:57:c1:29:0b:e2:75:d9:37:cb:bd: 53:c7:9e:3e:24:2c:52:da:74:e3:0b:86:94:66:0f:b9:b6:5c: 38:27:7b:4b:c8:79:d8:f1:d4:12:c9:ee:2e:30:3d:96:48:0d: 9a:e9:5d:08:8a:60:a9:e0:55:8c:37:59:c4:a5:b3:0e:b2:b8: 42:a8:db:9b:39:8f:1c:ef:34:25:eb:09:e8:e1:7a:b8:2d:1b: cf:00:47:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppixyXbwwmZ/01q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk ZTE3ZDE1NzEtNDgzYy00MmU4LWE4ZjUtOGVhY2M4Y2Y3ZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkk8jUPs0r1gQCofo2Y+CC2Mp6AsTRtIpHui jZ1CQx0sKaGbgvI1lOS5QW4s9zFbVc3I5IVc7r9qwqbzHDNicqrwtc0nosat0UA6 EgaWgjSbQvZTo8gfRJMxXsnO0Wmemh5ZRHd6cUzCZBaKZMqXqsw2IOLuN+sC8yhv ATp7LYYUNP76dNinfTH2fkB1ZUpEV4WL0QcQ2Kb6dr3EagSeIYJn2MC+oFoYHSUP 5MInK5ljauJNGP8v2XZbwABs1i1IpmbJwJk8tNAHg22ygv1oP1XzbTJPld6K3zz6 mzanYLvEdDOp7qVumu0R5wDSDIQ90+wJdQ26Wi6Eu8o23rcrMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzc/2Kjn/Mq9ORlwcbp47BLzhQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYmYzMWE1MDMtMjJlMy0z MWJiLTk2NzMtNWUyMDEyY2ZmYTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrHliMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhr9VTBg26eL74W5uaCc5tjcbonHYnlmVqVtXcwbGOiwfx8dGwXu8xo lK08kLgk5QwVm5KCOotUc2Ucr6lO/cSOZCYpQDzXgVCV5DSvtuSyWk4437JKGAlJ t/YmlZc5msY+BNCT4zXePOSvhHdrPummD4cskLNYqXALFW4aUvaoMVaIBRjeyjqw EPf1JnLHHax4v+Vnx4TbewmYfziC1ABsPi1aa7VXylSfV8EpC+J12TfLvVPHnj4k LFLadOMLhpRmD7m2XDgne0vIedjx1BLJ7i4wPZZIDZrpXQiKYKngVYw3WcSlsw6y uEKo25s5jxzvNCXrCejhergtG88AR/o= -----END CERTIFICATE-----Generated at Sat Aug 9 01:09:18 2025 by rpki-client